2026年9月4日

CVE-2026-51618 [HIGH] – Incorrect access control in the getWizardCfg function of TOTOLINK T6 4.1.5cu.748_B20211015

未分类

📑 文章目录

Incorrect access control in the getWizardCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain setup wizard and onboarding configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi.

相关文章